Skip to content
Threat Feed
Subscribe

Product

Php-Travel-Agency-System

1 brief RSS
high advisory

oretnom23 php-travel-agency-system: Authentication bypass via user_id manipulation (CVE-2026-114439)

An authentication bypass vulnerability in the php-travel-agency-system allows remote attackers to gain unauthorized access by manipulating the user_id argument in admin/session.php.

php-travel-agency-system +1 web-application authentication-bypass cve-2026-114439
1t 2c